Reusing Usernames and Passwords

If you use your Blizzard email address and password to create accounts for other games and websites, the security of all your accounts can be put at risk. If a hacker gets access to the login information of any of these accounts, they'll be able to control all of them.

Consider using alternate email addresses for other accounts. Then if one account becomes compromised, your other accounts remain protected. At the very least, use a different password for each account that shares the same email address.

Malicious Websites

Some websites target your browser's weak spots and install harmful software on your computer. These sites are often made to look very much like official Blizzard sites.

Double-check the URL of every link before you click on it. If it doesn't direct to a blizzard.com or battle.net address, do not click it.

Malicious Addons

Some hackers inject viruses and other malware into player-made addons. These programs can break your game installation, damage your computer, or leave you open to credit card and identity theft.

Only download addons from sites you trust, and never run an executable file during addon installation. If you think an addon may have infected your computer, run a security scan and change your password immediately.

Phishing

Phishing occurs when hackers use websites, email, and in-game communication pretending to be official Blizzard Entertainment correspondence. They will either trick you into revealing your login information, or they'll infect your computer with malware to steal your information.

Gold Sellers and Leveling Services

Gold sellers and leveling services often steal the Blizzard accounts and credit cards of those who purchase their services.

Do not solicit leveling services, and do not buy gold from non-Blizzard sources. If you want to exchange currency for in-game gold, consider purchasing a WoW Token.

Account Sharing

The simplest form of account theft occurs when you share your login information with another player. This may be someone you know in real life, or someone using a tactic called "social engineering" to gain your trust.

Refuse to share your account information with others. Also avoid logging in to your account on someone else's computer. There's no guarantee their computer is as safe as it needs to be.